SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains numerous embedded URLs, with the primary one being http://gaminggenerator.org/app/431946152/how-to-get-400-robux-on-roblox-for-free, which is presented as a lure for free Robux. The ML classifier also flagged this PDF as malicious. The presence of a visual download button heuristic further supports the deceptive nature of the document, aiming to trick users into clicking malicious links.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-400-robux-on-roblox-for-free PDF link annotation
- http://ekaterinakorneva.com/images/roblox-offline-free-download-pc.pdfIn PDF document text
- http://www.boic.nl/images/how-to-get-free-shirts-on-roblox-2021.pdfIn PDF document text
- https://pa-waingapu.go.id/images/how-to-get-robux-hack-2021.pdfIn PDF document text
- http://adenmarks.se/images/como-ser-un-hacker-en-rhouse-of-keys-roblox.pdfIn PDF document text
- https://sdg-trade.com/images/roblox-highschool-hack-script-oder.pdfIn PDF document text
- http://karldall.dk/images/free-girl-pants-roblox.pdfIn PDF document text
- https://studentcareerinfo.com/images/download-roblox-free-mundschutz.pdfIn PDF document text
- https://masseymotorcars.com/images/free-coins-in-assassin-roblox.pdfIn PDF document text
- https://amatq.ca/images/como-tener-robux-gratis-2021-sin-hack.pdfIn PDF document text
- http://brandyourbody.com/images/denis-free-robux-code.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/cheat-codes-build-a-boat-roblox.pdfIn PDF document text
- https://www.nema.go.ke/images/roblox-free-robux-codes.pdfIn PDF document text
- https://www.abrapppe.org.br/images/free-robux-on-ipad-pro.pdfIn PDF document text
- http://salantiskis.lt/images/robux-how-to-get-free-robux.pdfIn PDF document text
- http://www.cosver.nl/images/plutonium-hack-roblox.pdfIn PDF document text
- http://pourvosvacances.com/images/roblox-free-robux-hack-no-human-verification-2021.pdfIn PDF document text
- http://armportal.co.uk/images/roblox-robux-promocodes-no-hack-free.pdfIn PDF document text
- http://dorfgaragethalwil.ch/images/roblox-money-generator-free-download.pdfIn PDF document text
- https://gaj.rs/images/roblox-animatronic-tycoon-cheat-codes.pdfIn PDF document text
- http://centuriatus.com/images/how-to-get-free-gamepass-on-roblox.pdfIn PDF document text
- http://energotestcontrol.ru/images/robux-hack-2021-nooo-verification-or-survey-no-lie.pdfIn PDF document text
- https://pemadamapi.net/images/roblox-gift-card-online-free.pdfIn PDF document text
- http://colegioluisamigo.cl/images/how-to-upgrade-roblox-for-free.pdfIn PDF document text
- http://www.lionel-seppoloni.fr/images/robux-for-free-works.pdfIn PDF document text
- http://sealysports.com/images/roblox-jailbreak-money-hack-december-2021.pdfIn PDF document text
- http://www.mjclautrec.fr/images/roblox-the-conquerors-hack.pdfIn PDF document text
- http://dieter-sauter.com/images/nuevo-hack-de-robux-2021.pdfIn PDF document text
- http://www.occquimica.com.br/images/how-to-get-denisdaily-shirt-in-roblox-for-free.pdfIn PDF document text
- https://laconce.com/images/icepprof-roblox-hacks.pdfIn PDF document text
- https://wandpiraten.de/images/how-to-hack-someones-account-through-team-create-roblox.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/how-to-hack-roblox-2021-pc.pdfIn PDF document text
- http://www.mikramarine.gr/images/roblox-roalye-high-how-to-get-multi-colours-for-free.pdfIn PDF document text
- http://stroygrad-spb.com/images/sk8r-roblox-free-download.pdfIn PDF document text
- http://iacovoulaw.com/images/hack-para-counter-blox-roblox.pdfIn PDF document text
- http://sscclc.edu.ec/images/pastebin-com-robux-hack-2021.pdfIn PDF document text
- https://esl.ipb.ac.id/images/free-roblox-promo-codes-july-2021.pdfIn PDF document text
- http://domaizdereva24.ru/images/2021-free-promo-codes-robloxyoutube.pdfIn PDF document text
- https://www.cpnf.ch/images/how-to-earn-robux-without-cheats.pdfIn PDF document text
- https://www.hofe-gmbh.de/images/1-https-wwwrobloxcom-games-202120211-mortusrpgfreevip.pdfIn PDF document text
- http://sscclc.edu.ec/images/roblox-cheat-madcity.pdfIn PDF document text
- https://koeltotaal.com/images/roblox-free-robux-promo-codes-2021.pdfIn PDF document text
- https://www.iadh.bi/images/free-app-rewards-robux.pdfIn PDF document text
- http://www.bbnest.it/images/roblox-mad-city-hack-money-francais.pdfIn PDF document text
- http://jasperfirstumc.com/images/free-item-going-limited-in-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/cheats-for-robux-2021.pdfIn PDF document text
- http://dialine.cz/images/free-robux-generator-no-verification-2021.pdfIn PDF document text
- http://escolaarboc.cat/images/real-roblox-lumber-tycoon-2-hack.pdfIn PDF document text
- https://academy.cr/images/bloxland-free-robux-promo-code.pdfIn PDF document text
- https://sectorpravdy.com/images/como-instalar-hacks-para-roblox-2021.pdfIn PDF document text
+16 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off0000816b.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x816B | 25576 bytes |
SHA-256: 2eb9330e6267c6bd1b90a33a2e730014b585e4f944d70486e02d6015b21171db |
|||
font_01_sfnt_off0000bbdf.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBBDF | 17984 bytes |
SHA-256: 087e5839785d8e2f7f254c9e574479576ee947ad249eb681667015cb1afe730c |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.